Episode Overview

Title: No CMMC, No Contract: Why You're Already Too Late for NAVAIR
Podcast: Sum IT Up: CMMC News Roundup
Date: February 12, 2026
Host: Summit 7

In this episode, Summit 7 dives into the hard realities behind the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) deadlines, focusing on what defense contractors supporting the Naval Air Systems Command (NAVAIR) need to know about procurement windows and their shrinking chances if waiting to begin compliance efforts. The hosts analyze real NAVAIR contract forecasts and procurement timelines, debunking common misconceptions about how much preparation time remains and highlighting why waiting for a formal requirement in a solicitation is a recipe for missing out on business.

Key Discussion Points & Insights

1. Bottom-Line Urgency: CMMC as a Prerequisite

• Main Takeaway: CMMC compliance must be achieved before contract award; waiting until the requirement appears in a solicitation leaves very little time.
• Factoid: Across NAVAIR’s forecast, contractors will have on average only nine months from solicitation to contract award for most opportunities.
• Warning: “Some fun facts ... The smaller the contract, the less time you have to prepare. 35% of opportunities are anticipated to have an award window of six months or less.” (A, 00:45)

2. Procurement Administrative Lead Time (PALT): The Crucial Metric

• PALT measures the time from solicitation to contract award.
• Congress and DoD want short procurement windows; for contractors, this means less time to become CMMC compliant, especially if starting late.
• “This is why, in my opinion, PALT is the single most useful metric for strategically planning for CMMC.” (A, 04:09)

3. Why Starting Early is Non-Negotiable

• Solicitations increasingly require proven CMMC status before you even get to see contract details.
• Many contractors drastically overestimate their readiness, as repeatedly shown in DoD’s own surveys.
• “We see solicitations that require you to prove that you have that certification level before you get to see what’s in the contract to see if you even want to bid on it.” (B, 05:43)

4. NAVAIR’s Acquisition Forecast: What the Data Says

• The NAVAIR Long Range Acquisition Forecast (LRAF/LRAE) provides detailed projections of solicitation and award dates for upcoming contracts—both large and small.
• “In December, NAVAIR put out their most recent long range forecast. It had 1676 opportunities listed ... 1070 opportunities that list both an estimated solicitation date and a contract award date.” (A, 09:21)

5. By the Numbers: Time Windows Are Tighter Than Most Expect

• All NAVAIR opportunities (classified/unclassified): Average PALT is 10 months (A, 11:24).
• Unclassified, all contract values: Average PALT is nine months (A, 13:45).
• Unclassified, under $2M: Average PALT is eight months (A, 15:39).
  • “The smaller you are, the smaller the work ... the faster you will need to go.” (A, 15:39)
• $2–7.5M: 9 months
• $7.5–$50M: 9 months
• $50–$100M: 9.5 months
• $100–$250M: 15 months (first time window reaches over a year)
• “If you would like to have a 15 month window ... you better be bidding on contracts that are worth $100 to $250 million bucks.” (A, 19:49)
• $250M–$1B: 11.5 months
• Over $1B: 15 months

6. Larger Contracts Don't Guarantee More Time

• Even for mega-awards ($250M+), timelines rarely stretch beyond 15 months. The Gov’t is incentivized to keep timelines tight.
• “Congress and the DOD don’t want to have billion dollar opportunities take years to award. They want it to get done.” (A, 21:49)

7. Impact on Prime/Subcontractors

• Subcontractors face additional complexity: they may be told by primes “Go get it now” with even less clear notice.
• Primes are increasingly verifying CMMC status with their supply chains well in advance.

8. Annual Contract Influx & Q2 Deadlines

• 30% of NAVAIR solicitations are anticipated in Q2 2026.
• 32% of contract awards are anticipated in Q2 2026—those solicitations are already out for many.
• There will be a “big influx of this stuff” coming up, compressing timelines even further. (A, 25:03)

9. Common Misconceptions & Misplaced Hope

• “Forget all that ... You can go to the long range acquisition forecasts, look up ... those contracts specifically, and calculate how much time you will have between solicitation and award, and know exactly what kind of window you have in order to prep and get CMMC ... It’s right there for everybody to get.” (A, 24:11)
• Reliance on widely discussed “phase rollouts” or later compliance deadlines is risky—your contracts may require CMMC far sooner.

Notable Quotes & Memorable Moments

• On urgency and readiness:
  • “The cream is rising to the top and people are taking this seriously. ... The rest ... are having these conversations like, I haven’t seen anything to make me motivated enough to do this ... or I really need your help because I scheduled my C3PAO to come in 10 days.” (B, 02:02)
• The cold math:
  • “On average, 10 months to go from basically zero ... to then being fully compliant ... in your hands, 10 months.” (A, 11:24)
  • “Eight months, I can tell you, is not realistic for 85% of the organizations that I’ve spoken to in the past 90 days.” (B, 15:39)
• Budget vs. procurement inertia:
  • “A lot of times ... It's not because of the technology ... It’s because of decisions and budgets and people, you know, deciding that this is actually a priority and getting everybody in the team to agree ... Then you start talking about project kickoffs and backlogs ... all of a sudden three or four months went by.” (A, 12:56)
• On primes and the supply chain:
  • “So as the prime contractor now, I’m looking at a PALT time ... at 15 months, right? ... I don’t know if I’m a prime contractor, I’m putting out supply letters that say contact us if you’re certified.” (B, 23:02)
• Advice for all contractors:
  • “Don’t overestimate your readiness. Don’t underestimate how small these windows are from solicitation to award.” (A, 25:11)
  • “Everyone except for maybe one of the clients that I’ve spoken to ... their requirement, they knew that they had it. And it didn’t come directly from the DoD. It came from the people that give them money to pay their bills.” (B, 26:24)

Important Segment Timestamps

• (00:00–02:00): The myth of waiting for solicitation; urgency of starting early.
• (04:00–06:00): PALT explained; why DoD wants short procurement windows.
• (09:00–13:00): Deep dive into NAVAIR’s LRAF/LRAE and data methodology.
• (13:45–17:00): Contract size breakdown; window of opportunity shrinks as contract gets smaller.
• (17:00–21:00): Larger contracts (> $50M) surprisingly don’t give substantially more time.
• (21:45–23:45): Even billion-dollar contracts offer only 15 months; primes demanding readiness from supply chain.
• (24:00–25:30): The reality behind phased rollouts and your actual contract timelines.
• (26:24–27:20): Closing remarks; the true origin of CMMC requirements—your customer, not just the DoD.

Episode Tone & Final Advice

The hosts are candid, slightly irreverent, and direct—emphasizing the high stakes for contractors who wait. They urge listeners to stop relying on rumors or hopeful “phased rollouts” and instead scrutinize their own real contract opportunities using official forecasts and PALT metrics.

Final Message:
“Don’t overestimate your readiness. Don’t underestimate how small these windows are. Do the math for yourself—otherwise, you’re already too late.”